Hesabu — Privacy policy
Last updated: 17 October 2026
This policy explains what Hesabu collects and why. We follow the principles of Kenya's Data Protection Act, 2019: we collect only what the service needs, keep it secure and let you delete it.
What we collect
- Your account: your name and email address, the shops you belong to, and when you last signed in.
- Your shop's records: products, prices, stock, sales, receipts, invoices (including the customer names and contacts you type on them), business details, product photos and logo, and an activity log of changes.
- Team members: the names, email addresses and job titles that shop owners add.
- Your profile and preferences: the name, phone and title you enter in Settings.
What we don't collect
No passwords (you sign in with an emailed code), no payment card details, no advertising or tracking cookies, and no selling of data. We use one cookie to keep you signed in. We keep your IP address only briefly in coded form to stop abuse of sign-in.
How we use it
To run your shop's ledger, to email you sign-in codes, your welcome email and team invitations, and to answer your questions. Each shop's records are visible only to its team, according to the rights the owner chooses.
Who else handles it
- Our web hosting provider, which stores the data on its servers.
- Our email provider, which delivers our emails.
- Google Fonts and the cdnjs library service, which your browser contacts to load fonts and the PDF and Excel tools.
How long we keep it
As long as your account or shop exists. Sign-in codes expire after 10 minutes. When you delete your account, your account and the shops where you are the only owner are deleted. Backups are overwritten within 30 days.
Your rights
You can see and correct your details in Settings, export your shop's records, delete your account, and ask us what we hold about you or to correct or delete it. If you are on a shop's team, the shop owner controls that shop's records; ask them first.
Contact
branditnakuru@gmail.com